ServiceMac-CISO

About this role

Who We Are ServiceMac is a new sub-servicing entity backed by some of the leading practitioners of the mortgage servicing industry. ServiceMac is focused on providing superior technology, products, and services for the mortgage and real estate industries backed by highly personalized service and support. Through continuous innovation and acquisition, our offerings comprise of personalized solutions that span the mortgage continuum and enhance security, compliance, customer satisfaction, and profitability. Our inclusive, people-first culture has earned our company numerous accolades, including being named to the Fortune 100 Best Companies to Work For® list for eleven consecutive years. We have also earned awards as a best place to work for women, diversity and LGBTQ+ employees, and have been included on more than 50 regional best places to work lists. First American will always strive to be a great place to work, for all.

What We Do Functions as the senior-most Information Security leader for ServiceMac, accountable for translating enterprise security strategy into operational execution and providing ongoing visibility into security risks, control effectiveness, and program maturity to executive leadership. Operates within First American enterprise security governance while ensuring ServiceMac security posture aligns with business objectives, regulatory expectations, and corporate standards. Responsible for developing, designing, and executing the ServiceMac Information Security Program to ensure protection of information assets and alignment with regulatory, legal, and enterprise risk requirements.

Provides long-term solutions to Information Technology needs, including protecting information and information systems from unauthorized access, use, disclosure, disruption, modification, or destruction.

How You’ll Contribute • Leads the ServiceMac Information Security function with accountability for strategy, execution, and performance of security programs. Establishes and maintains a comprehensive Information Security Program aligned with enterprise policies and regulatory requirements. • Serves as primary security advisor to executive leadership. • Ensures alignment with corporate security policies while tailoring implementation to business operations. Maintains regulatory awareness and ensures proper controls and reporting structures are in place. • Oversees threat and vulnerability management, control implementation across infrastructure, applications, identity, and data security, and ongoing validation through testing and assessments. • Oversees incident response planning and serves as escalation point for major security events. • Provides security architecture guidance for business and IT initiatives, ensuring alignment with enterprise standards. • Leads security awareness initiatives and promotes strong security culture. • Oversees third-party risk in coordination with enterprise programs. • Manages team, budgets, and resources and ensures delivery of security objectives. Interfaces regularly with executive leadership and enterprise stakeholders. • Supports regulatory inquiries, audits, and enterprise initiatives.

WHAT YOU’LL BRING Required Education, Experience, Certification/Licensure • BA/BS degree in Computer Information Systems, Computer Science or equivalent experience required.   Training courses, seminars, certifications or other security related education experience preferred. • 5+ years of technical experience as a senior contributor. • 8+ years of management experience including 3–5 years of director-level experience. • Security certifications such as CISSP, CISM, or CISA preferred.

Knowledge, Skills, and Abilities • Knowledge of security and control frameworks such as NIST, ISO, COBIT, and related enterprise governance models, and the ability to apply those frameworks within a business-aligned operating model. • Ability to translate enterprise Information Security strategy into actionable ServiceMac programs, measurable outcomes, and risk-based priorities. • Demonstrated understanding of Information Security, cyber risk management, and regulatory expectations applicable to financial services environments and mortgage servicing operations. • Successful track record designing, developing and executing critical complex projects in more than one area of functional expertise. • Proven thought leadership and innovation in the areas of: process envisioning, operational effectiveness, work process efficiency and metrics. • Ability to establish and maintain effective working relationships at the senior management level across functional groups, business units, and vendor organizations. Ability to change the thinking of, or gain acceptance from, others in sensitive situations, using influence and preventing damage to the relationship. • Strategic Management: Ability to communicate function vision and establish aligned direction and goals for his/her department. Obtains and effectively allocates resources. Creates systems to measure results. Has in-depth understanding of competitor, financial and industry dynamics. • Team Development: Actively recruits, retains and develops talent and holds employees accountable for results. Translates vision into action, leads change, and inspires people to get results. • Ethics: Deals with others in an honest manner, assures adherence to company policies, and addresses questionable business practices. • Customer Focus: Drives and models customer loyalty, manages customer expectations, uses customer feedback to establish department goals, and ensures commitments are met. • Communication: Provides others with reliable information, delivers informative and persuasive presentations. Uses good listening skills and negotiates effectively.

Complexities & Impact • Accountable for the Information Security posture of ServiceMac operations within the First American enterprise governance framework. • Decisions directly impact ServiceMac regulatory compli

Similar jobs

• SFO - Office Site Security Manager — Nebius · Remote
• Security and Compliance Manager — Sierra · San Francisco, CA
• Security and Compliance Manager — Clinicallyai · San Diego, CA
• CISO — Rain · New York, NY
• Communications Security Account Manager — Spacex · Hawthorne, CA
• SOC Cyber Security Manager — GDIT · USA VA Falls Church
• Field CISO — Drata · Remote
• Field CISO — Torq · United States